Compare software

Velociraptor vs THOR Lite: catalog facts
VelociraptorTHOR Lite
Free

The software is free under its open-source licence. Hosting, hardware and external…

Free

Free limited version of the commercial THOR scanner.

Windows, macOS, Linux Windows, macOS, Linux, Command line
  • Its query language lets you collect arbitrary host state across a whole fleet on demand, and a single…
  • Scans files, processes and autoruns with YARA and IOC signatures
  • Precompiled for Windows, Linux and macOS
  • Writing useful collections means learning its query language, and a fleet deployment needs real planning.
  • Not open source
  • Limited modules and signature set compared to the paid THOR
Downloadable app Downloadable app
Open source Closed source
License: AGPL-3.0 License: Proprietary
Not stated if an account is needed Not stated if an account is needed
Not stated if it works offline Works offline

Checked September 22, 2026

Checked September 24, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.